USN-4853-1: liveMedia vulnerabilities

It was discovered that liveMedia incorrectly handled certain network packets. An attacker could possibly use this issue to execute arbitrary code. CVE-2018-4013 It was discovered that liveMedia incorrectly handled certain network sessions. An attacker could possibly use this issue to cause a deni...

USN-4793-1: collectd vulnerabilities

It was discovered that collectd mishandled certain malformed packets. A remote attacker could use this vulnerability to cause collectd to crash or possibly execute arbitrary code. CVE-2016-6254 It was discovered that collectd failed to handle certain input. An attacker could use this vulnerabilit...

EulerOS Virtualization for ARM 64 3.0.2.0 : iscsi-initiator-utils (EulerOS-SA-2021-1377)

According to the versions of the iscsi-initiator-utils packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Contiki through 3.0. An Integer Overflow exists in the uIP TCP/IP Stack...

[SECURITY] [DLA 2571-1] openvswitch security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2571-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz February 19, 2021 https://wiki.debian.org/LTS -...

Ubuntu: Security Advisory (USN-4729-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4729-1: Open vSwitch vulnerability

Joakim Hindersson discovered that Open vSwitch incorrectly parsed certain network packets. A remote attacker could use this issue to cause a denial of service, or possibly alter packet classification...

The vulnerability of the Advanced Networking Option component of the Oracle Database Server system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Advanced Networking Option component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected...

Vulnerability of the Server component: Security: Privileges of the MySQL Server database management system, which allows attackers to gain read access to data or obtain privileged access.

The vulnerability of the MySQL Server component lies in its lack of proper input validation. Exploiting this vulnerability allows an attacker to gain read access to data or privileged access through network packets...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows attackers to cause service failures or gain privileged access.

The vulnerability of the MySQL Server component of the database management system involves errors in resource release. Exploiting this vulnerability can allow a malicious actor to cause service failures or gain privileged access through network packets...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions through network packets...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component, which is part of the database management system, is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through network packets...

The vulnerability of the RDBMS Scheduler component of the Oracle Database Server management system allows a hacker to execute arbitrary code.

The vulnerability of the RDBMS Scheduler component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted network packets remotely...

Vulnerability of the MySQL Server component: This component is part of the Database Management System, allowing attackers to cause service failures.

The vulnerability of the MySQL Server component exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using specially crafted network packets...

Integer Overflow

open-iscsi:sid is vulnerable to integer overflow. The vulnerability exist in the uIP TCP/IP Stack component when parsing TCP MSS options of IPv4 network packets in uipprocess in net/ipv4/uip.c...

The vulnerability of the Fanuc 32i numerical program-controlled controller lies in the insufficient verification of input data, allowing a intruder to trigger a service failure.

The vulnerability of the Fanuc 32i numerical program-controlled controller is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure using specially crafted network packets...

The vulnerability of the Fanuc 32i numerical program-controlled controller lies in a control mechanism for managing system resources. This flaw allows a hacker to halt the operating program’s execution.

The vulnerability of the Fanuc 32i numerical program-controlled controller is related to a bug in the mechanism for managing system resources. Exploiting this vulnerability allows an attacker to halt the operating program using specially crafted network packets...

CVE-2019-19287

A vulnerability has been identified in XHQ All Versions 6.1. The web interface could allow attackers to traverse through the file system of the server based by sending specially crafted packets over the network without authentication...

CVE-2020-13988

An issue was discovered in Contiki through 3.0. An Integer Overflow exists in the uIP TCP/IP Stack component when parsing TCP MSS options of IPv4 network packets in uipprocess in net/ipv4/uip.c...

CVE-2020-13985

An issue was discovered in Contiki through 3.0. A memory corruption vulnerability exists in the uIP TCP/IP stack component when handling RPL extension headers of IPv6 network packets in rplremoveheader in net/rpl/rpl-ext-header.c...

CVE-2020-13986

An issue was discovered in Contiki through 3.0. An infinite loop exists in the uIP TCP/IP stack component when handling RPL extension headers of IPv6 network packets in rplremoveheader in net/rpl/rpl-ext-header.c...